Unauthenticated User Can Obtain Admin Credentials in D-Link DIR-601 B1 2.02NA

CVE-2018-5708 · MEDIUM Severity

AV:A/AC:L/AU:N/C:C/I:N/A:N

An issue was discovered on D-Link DIR-601 B1 2.02NA devices. Being on the same local network as, but being unauthenticated to, the administrator's panel, a user can obtain the admin username and cleartext password in the response (specifically, the configuration file restore_default), which is displayed in XML.

Learn more about our Network Penetration Testing.